$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qDjkKB7zKtmQPQtxxkTuQCwC26g.roa File: qDjkKB7zKtmQPQtxxkTuQCwC26g.roa (raw, json) Hash identifier: RS5QshR3kkMaF2ctzWM+jBsrjcoo1fZoEeqiCeU/ixw= Subject key identifier: A8:38:E4:28:1E:F3:2A:D9:90:3D:0B:71:C6:44:EE:40:2C:02:DB:A8 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3A87 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qDjkKB7zKtmQPQtxxkTuQCwC26g.roa Signing time: Fri 22 Aug 2025 08:47:27 +0000 ROA not before: Fri 22 Aug 2025 08:47:27 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14983 (0x3a87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:27 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A838E4281EF32AD9903D0B71C644EE402C02DBA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:72:8c:05:46:68:75:47:3c:ce:d1:5e:05:64: 75:f6:7d:98:c0:09:d7:36:f6:36:89:df:58:f2:e4: 83:44:38:24:52:d9:3a:4f:b0:f8:96:75:48:32:12: 38:e1:3f:ee:1d:31:c6:42:7d:1e:a8:41:f8:ba:92: 8e:5f:ca:f9:17:9d:fb:d3:cb:b9:b1:2c:0a:5e:d3: bd:fb:1e:c0:73:c8:c5:5b:2a:d1:9a:41:e3:8e:2d: 8d:24:39:28:aa:3b:10:84:f0:ac:79:8b:9a:b6:3c: b5:4c:8c:b7:88:a9:13:39:b4:63:a1:66:3f:cb:c1: 30:5e:b7:63:2c:08:e2:24:c3:8b:a1:a1:ff:ee:a4: c2:58:5e:83:06:f9:8b:19:44:f1:ab:1d:db:6d:58: 5e:d2:e9:11:a6:4a:b2:e1:99:a4:09:d5:a7:5d:89: 57:27:5b:aa:db:2f:10:09:eb:c5:fd:9d:89:fa:3a: 81:f2:8b:4a:62:f0:fa:47:ec:a6:61:0a:19:3a:3f: 21:5a:73:a1:9c:04:83:f5:c4:0d:6e:f1:36:d9:96: e8:89:a0:9e:ca:12:08:59:ec:56:d2:32:4e:fd:8b: 31:69:3f:81:25:ec:f0:f9:5e:26:f3:8d:93:52:be: bf:da:eb:ba:9b:be:dd:fc:45:31:05:7a:a8:78:8b: a4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:38:E4:28:1E:F3:2A:D9:90:3D:0B:71:C6:44:EE:40:2C:02:DB:A8 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qDjkKB7zKtmQPQtxxkTuQCwC26g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.216.0/21 Signature Algorithm: sha256WithRSAEncryption 7d:f5:03:12:35:8a:20:56:8f:a9:71:c4:86:30:8f:44:c0:dd: 04:2d:2a:93:2d:f4:f0:d8:55:5b:41:9a:91:4a:44:db:7c:b5: 99:ac:41:7d:bc:c5:d3:7a:0f:b7:c8:c4:e3:43:4a:1c:c6:7a: 58:ca:d4:56:8a:fc:63:43:cf:4e:35:f0:04:e9:65:41:d0:b3: 4e:78:6d:97:33:52:dc:30:59:56:89:81:db:bb:4f:cc:cd:b8: 4c:59:ee:fa:a4:33:68:3f:16:53:59:90:94:c8:1f:f7:66:61: a5:de:3f:19:ca:d0:ff:f8:24:80:f5:3f:ca:e4:60:0a:6b:ac: ce:bc:a1:18:23:b9:37:8d:f2:c2:b8:bb:83:c1:6b:bf:c3:58: 08:09:85:8c:f0:78:b9:ef:bb:17:57:7f:91:cb:7e:ee:d9:37: f1:7e:f7:da:1f:d3:7c:79:34:3d:1e:0b:26:de:d4:24:c3:38: c4:4e:85:9f:a2:df:ad:96:29:34:fc:c4:a4:79:6e:c5:bc:ad: 5e:d5:5f:bf:51:30:90:13:83:70:79:32:b7:ba:33:90:72:98: f2:92:93:3c:d4:e4:e7:d7:d5:fc:a8:4c:a0:cb:c9:31:5b:ce: db:f6:32:d8:60:3f:d8:f8:db:50:dc:e3:d3:95:16:d5:97:1c: a4:15:ac:5f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOocwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MjdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE4MzhFNDI4MUVGMzJB RDk5MDNEMEI3MUM2NDRFRTQwMkMwMkRCQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkcowFRmh1RzzO0V4FZHX2fZjACdc29jaJ31jy5INEOCRS2TpP sPiWdUgyEjjhP+4dMcZCfR6oQfi6ko5fyvkXnfvTy7mxLApe0737HsBzyMVbKtGa QeOOLY0kOSiqOxCE8Kx5i5q2PLVMjLeIqRM5tGOhZj/LwTBet2MsCOIkw4uhof/u pMJYXoMG+YsZRPGrHdttWF7S6RGmSrLhmaQJ1addiVcnW6rbLxAJ68X9nYn6OoHy i0pi8PpH7KZhChk6PyFac6GcBIP1xA1u8TbZluiJoJ7KEghZ7FbSMk79izFpP4El 7PD5XibzjZNSvr/a67qbvt38RTEFeqh4i6S3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqDjkKB7zKtmQPQtxxkTuQCwC26gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FEamtLQjd6S3RtUVBRdHh4 a1R1UUN3QzI2Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7 w9gwDQYJKoZIhvcNAQELBQADggEBAH31AxI1iiBWj6lxxIYwj0TA3QQtKpMt9PDY VVtBmpFKRNt8tZmsQX28xdN6D7fIxONDShzGeljK1FaK/GNDz0418ATpZUHQs054 bZczUtwwWVaJgdu7T8zNuExZ7vqkM2g/FlNZkJTIH/dmYaXePxnK0P/4JID1P8rk YAprrM68oRgjuTeN8sK4u4PBa7/DWAgJhYzweLnvuxdXf5HLfu7ZN/F+99of03x5 ND0eCybe1CTDOMROhZ+i362WKTT8xKR5bsW8rV7VX79RMJATg3B5Mre6M5BymPKS kzzU5OfX1fyoTKDLyTFbztv2MthgP9j421Dc49OVFtWXHKQVrF8= -----END CERTIFICATE-----Generated at Fri Oct 24 19:18:41 2025 by rpki-client